13-20
Cisco ONS 15454 Reference Manual, R7.0
78-17191-01
Chapter 13 Management Network Connectivity
13.2 13.2.9 IP Scenario 9: IP Addressing with Secure Mode Enabled
Figure 13-15 IP Scenario 8: Dual GNEs on Different Subnets
13.2.9 IP Scenario 9: IP Addressing with Secure Mode Enabled
TCC2P cards provide a secure mode option allowing you to provision two IP addresses for the
ONS 15454. (The secure mode option does not appear in CTC if TCC2 cards are installed.) One IP
address is provisioned for the ONS 15454 backplane LAN port. The other IP address is provisioned for
the TCC2P TCP/IP craft port. The two IP addresses provide an additional layer of separation between
the craft access port and the ONS 15454 LAN. If secure mode is enabled, the IP addresses provisioned
for the TCC2P TCP/IP ports must follow general IP addressing guidelines. In addition, TCC2P TCP/IP
craft port addresses must reside on a different subnet from the ONS 15454 backplane port and
ONS 15454 default router IP addresses.
The IP address assigned to the backplane LAN port becomes a private address, which is used to connect
the ONS 15454 GNE to an Operations Support System (OSS) through a central office LAN or private
enterprise network. In secure mode, the backplane's LAN IP address is not displayed on the CTC node
view or to a technician directly connected to the node by default. This default can be changed to allow
the backplane IP address to be viewed in CTC only by a Superuser.
115259
Remote CTC
10.10.20.10
10.10.20.0/24
10.10.10.0/24 10.20.10.0/24
Interface 0/0
10.10.20.1
Router A
Interface 0/1
10.10.10.1
Interface 0/2
10.20.10.1
ONS 15454
GNE
10.10.10.100/24
ONS 15454
ENE
192.168.10.250/24
ONS 15454
GNE
10.20.10.100/24
ONS 15454
ENE
192.168.10.200/24
Local/Craft CTC
192.168.20.20
Ethernet
SONET